Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/kA4mioWDyuQixzbtIzOx1HbMbSw.roa
File: kA4mioWDyuQixzbtIzOx1HbMbSw.roa (raw, json)
Hash identifier: niTaBcIkXzG6NnbjORTanfhKi7IPjtMbS5alHvFrUzA=
Subject key identifier: 90:0E:26:8A:85:83:CA:E4:22:C7:36:ED:23:33:B1:D4:76:CC:6D:2C
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0187E718C3CAD247E8EF97D18B4266B0F2C3
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/kA4mioWDyuQixzbtIzOx1HbMbSw.roa
Signing time: Thu 04 May 2023 14:09:32 +0000
ROA not before: Thu 04 May 2023 14:09:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210636
IP address blocks: 45.139.254.0/23 maxlen: 24
45.94.30.0/24 maxlen: 24
45.94.28.0/23 maxlen: 23
45.148.26.0/24 maxlen: 24
93.185.163.0/24 maxlen: 24
45.88.246.0/24 maxlen: 24
45.132.192.0/24 maxlen: 24
45.88.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e7:18:c3:ca:d2:47:e8:ef:97:d1:8b:42:66:b0:f2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: May 4 14:09:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=900e268a8583cae422c736ed2333b1d476cc6d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:69:cd:10:70:e7:1d:78:04:0c:c9:4e:ac:c9:
54:4b:2c:1f:aa:31:92:7a:31:46:01:f9:74:dd:4d:
b3:70:e0:8e:14:bb:5f:86:69:e6:2c:d1:52:70:32:
2b:7d:67:2b:1c:a9:5b:76:ec:66:96:d4:5d:69:2d:
43:e2:aa:ce:35:51:a8:12:7c:e2:e6:5f:11:29:32:
5a:8d:58:c4:78:b6:d8:98:6c:18:34:55:21:aa:6c:
5c:5f:f3:53:c2:69:6c:43:8e:f1:38:ab:c4:50:35:
11:f9:73:26:c0:e7:ef:3b:57:b0:81:df:82:fa:e7:
a3:70:48:2e:65:51:e3:8b:b3:47:a1:00:fe:fb:18:
f3:22:6d:0a:d4:99:6a:88:11:01:8f:d6:5e:d3:37:
f3:ed:61:90:2f:3f:71:b0:34:46:7e:1b:21:3f:5d:
4f:10:15:a7:33:3a:74:bd:32:8c:83:b7:2c:a1:45:
09:7a:1b:7b:43:a8:42:b1:30:78:e5:f1:8f:4e:a2:
b9:b5:b8:96:58:cd:37:10:c6:45:ca:fa:a0:cb:6f:
b6:99:b0:32:83:f3:0d:48:a6:aa:17:16:20:1a:12:
3d:df:79:99:9e:5c:4d:4c:17:23:b3:24:4c:6a:4b:
e0:ab:78:a6:a1:a2:56:09:aa:80:1d:c6:06:64:94:
15:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0E:26:8A:85:83:CA:E4:22:C7:36:ED:23:33:B1:D4:76:CC:6D:2C
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/kA4mioWDyuQixzbtIzOx1HbMbSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.246.0/23
45.94.28.0-45.94.30.255
45.132.192.0/24
45.139.254.0/23
45.148.26.0/24
93.185.163.0/24
Signature Algorithm: sha256WithRSAEncryption
70:8b:26:b9:15:30:89:f4:15:1f:70:54:bf:5a:ac:5c:b8:99:
02:cf:ce:c5:b2:5e:58:b8:1a:dd:f3:2c:a3:2a:ce:0e:d3:65:
4c:7a:1b:2b:b1:c6:8e:b9:91:1d:e1:18:2f:44:40:83:31:be:
ce:af:b6:ee:87:f1:a9:04:e6:cd:17:86:f4:b6:7e:80:dc:1b:
d6:35:a9:f3:3b:ed:d1:0b:ef:c1:43:bf:42:ff:bb:9d:84:ad:
1b:0b:4a:4f:66:96:ff:8a:a4:6c:0d:f8:3c:69:8b:e5:bf:96:
0a:d0:92:bb:ad:60:3a:6d:bb:ac:8d:f2:67:f7:2a:14:56:f0:
ba:19:f6:8f:af:c9:0f:ec:73:46:ba:0b:9b:af:77:32:9d:39:
07:7c:f5:12:7b:25:02:dd:38:ce:71:b8:e1:a4:d8:fd:4b:f6:
5c:03:f6:82:40:ce:ff:8e:9c:ab:04:06:ed:cf:2b:9a:2f:31:
28:59:40:ca:f7:25:e6:a0:fb:2a:89:e1:50:13:d6:84:87:16:
6f:1e:c6:7c:ba:0b:73:d0:09:af:4f:23:a6:5b:62:63:ef:89:
ff:27:39:39:52:9e:da:a7:32:2a:51:2b:aa:7e:09:80:77:df:
c5:d8:f6:a4:ef:af:b0:8b:2c:4d:43:10:12:22:be:77:01:fa:
18:ea:f4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:33 2023 by rpki-client on console-fra.rpki-client.org